Personal data on this sheet

Controller

Data is controlled by the Sac & Fox Tribe of the Mississippi in Iowa, 1504 305th Street, Tama IA 52339. Privacy questions go to privacy@szerencsejatek-hu.shop.

Categories gathered

• Connection details that browsers hand over automatically — the IP address, user agent string (browser plus device type), which page was fetched and when.
• Rough geolocation inferred from the IP address — town or region at most, never a pinpoint.
• Form content: whatever name, email, topic and note you put into an email to us.
• The cookie decision you made, kept inside your own browser.

Purposes

• Serving pages and keeping the site safe from abuse (legitimate interest).
• Analytics: learning in aggregate which sections people open — consent only.
• Marketing and referral attribution: letting a partner see a booking began with our link — consent only.
• Replying to your messages (your request, plus consent).

Recipients and transfers

Contact details are never sold by us. Information can travel to:

• the web host and mail service acting under our instructions;
• partner and affiliate networks, and the hotel sites you open from our links, which may log that the visit arrived from the sheet;
• an analytics vendor, if you switch analytics on;
• public authorities, where a legal duty applies.

Several recipients may sit in another country. When the GDPR is in play, transfers rest on recognised safeguards, for instance the European Commission's standard contractual clauses.

Storage periods

• Web server logs: purged within 30 days, save when an active security investigation requires them.
• Correspondence: erased once two years have passed since the final message in the thread.
• Cookie decision: 12 months, then the bar returns.

GDPR rights (EEA, UK, Switzerland)

Readers covered by the GDPR or its UK and Swiss equivalents may ask for an export of everything we keep about them, get mistakes fixed, see records wiped, freeze certain handling, and take the file elsewhere in a machine-readable form. Processing that rests on legitimate interest can be objected to, and consent is withdrawable at any moment. Grievances can be raised with the supervisory authority of your home country as well.

CCPA/CPRA rights (California)

Californians are entitled to find out which kinds of personal information sit with us and why, to get them deleted or fixed, and to refuse any "sale", or any "sharing" for targeted advertising across unrelated sites. The right to limit use of sensitive personal information also exists, though we ask for none. Exercising these rights will never earn you worse treatment. Pressing Reject All in the bar has the same effect on referral and advertising cookies as the Global Privacy Control header some browsers send: either one switches them off.

Sending a request

Write to privacy@szerencsejatek-hu.shop. We might need to verify that the request is genuinely yours, and we answer inside the deadline the relevant law imposes. Someone you have authorised in writing may file it on your behalf.

Minors

The sheet is aimed at grown-ups, not children. Data from anyone under 16 is never knowingly gathered; tell us if a child has written in and that message will be erased.

Revisions

Every change to this notice moves the revision stamp printed under its heading.